Did you mean to say you recommend against exposing services?


I don’t have any links on hand, but there a post either in this community or !piracy@lemmy.dbzer0.com that explains how to setup a full arr stack in docker. I’ll see if I can find it in the morning.
Here’s a quick and dirty explanation for your other questions. Sonarr and radarr manage your media. Sonarr handles TV, radarr handles movies. That is the only difference. Without a download client (e.g. qBittorrent) they don’t do anything. Jellyfin is how the downloaded (qBittorrent) and managed (*arrs) media gets played on your screen.
I’m foggy on the details, but jellyfin has specific vulnerabilities that make it not recommended to expose publicly. If you must watch remotely, set up a VPN. If you don’t to manually setup wireguard you can use tailscale, which itself uses wireguard, but it does the hard part for you


I think this particular bot is a good one
I just recently set this up for myself. I used Racknerd (they have crazy deals you can find on racknerdtracker which, to my understanding, work because any unclaimed deals they’ve ever offered don’t expire). If you’re only using it as an access point for stuff you’re hosting at home, you can get a cheap 1 core kvm with appropriate speed and data limits, and connect with wireguard (or as other people have said, pangolin or similar services)